CVE-2007-2402

Impact

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://docs.info.apple.com/article.html?artnum=305947
• http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
• http://osvdb.org/36131
• http://secunia.com/advisories/26034
• http://www.securityfocus.com/bid/24873
• http://www.securitytracker.com/id?1018373
• http://www.us-cert.gov/cas/techalerts/TA07-193A.html
• http://www.vupen.com/english/advisories/2007/2510
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35361
• http://docs.info.apple.com/article.html?artnum=305947
• http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
• http://osvdb.org/36131
• http://secunia.com/advisories/26034
• http://www.securityfocus.com/bid/24873
• http://www.securitytracker.com/id?1018373
• http://www.us-cert.gov/cas/techalerts/TA07-193A.html
• http://www.vupen.com/english/advisories/2007/2510
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35361